PSIRTXSS vulnerability in the FortiManager in the "system replacemsg http" when we edit a message
Summary
An improper neutralization of input vulnerability in FortiManager GUI may allow an authenticated attacker to perform an XSS (Cross Site Scripting) attack via the buffer parameter.
Affected Products
FortiManager 6.2.1 and below
Solutions
Upgrade to FortiManager 6.2.2 or above
Acknowledgement
Fortinet is pleased to thank Patrick Nielsen for reporting this vulnerability under responsible disclosure.